$ rpki-client -vvf rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.mft File: BHuLKVTEerFcV1ht0ATriTl3xa8.mft (raw, json) Hash identifier: NlChHxpKzvlYH/VqSp5lu+/9DyZZKTUVitVMOs6LwB0= Subject key identifier: 43:E5:3C:24:80:06:B3:DA:43:03:7E:3A:A8:64:86:6D:35:96:80:4A Authority key identifier: 04:7B:8B:29:54:C4:7A:B1:5C:57:58:6D:D0:04:EB:89:39:77:C5:AF Certificate issuer: /CN=A918E8EB/serialNumber=047B8B2954C47AB15C57586DD004EB893977C5AF Certificate serial: 126B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BHuLKVTEerFcV1ht0ATriTl3xa8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.mft Manifest number: 1259 Signing time: Wed 14 May 2025 17:11:46 +0000 Manifest this update: Wed 14 May 2025 17:11:46 +0000 Manifest next update: Wed 21 May 2025 17:11:46 +0000 Files and hashes: 1: BHuLKVTEerFcV1ht0ATriTl3xa8.crl (hash: zLXnMwyDpIRi/BVwatekSpahbfGLJ8sAAFspsc8zpKY=) 2: 3489528EC84511ED90A61540C4F9AE02.roa (hash: 0GBU9clR4v/kv/m8Iw+tpC8pBR8oX1ZqIKf4DgtvCco=) 3: 35615A30C84511ED90A61540C4F9AE02.roa (hash: CfO3CZyouhq3VXYxiVm5tnc8saneiKp2zLb93JcMMQ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.crl rsync://rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BHuLKVTEerFcV1ht0ATriTl3xa8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 17:11:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4715 (0x126b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E8EB, serialNumber=047B8B2954C47AB15C57586DD004EB893977C5AF Validity Not Before: May 14 17:11:46 2025 GMT Not After : May 21 17:11:46 2025 GMT Subject: CN=6824ced2-7cc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:b1:32:c5:a4:24:26:f6:c9:3d:1f:dc:ce:e7: bc:84:0c:ca:1f:a9:c5:37:0c:0c:37:4d:d6:77:68: 35:5c:dd:e8:71:ae:cc:73:ba:79:b8:a4:7a:7b:60: bf:e9:35:65:08:17:08:05:dd:b7:be:a2:5e:9a:ce: e1:67:29:6f:46:51:56:4b:0e:c1:5f:52:a9:b5:94: 6d:4b:94:08:97:1e:0b:d0:42:da:49:b2:19:93:97: 8a:71:d9:2d:52:71:b2:eb:75:d7:03:cd:13:af:13: c6:13:63:e2:55:4e:de:ff:f0:4a:50:5a:89:0d:7f: 95:d2:68:4a:78:4c:0b:90:d5:3b:35:6d:ae:0e:c6: da:ae:44:8b:a3:c4:0c:1b:31:a5:6f:dc:81:98:b3: a9:e7:22:d9:16:c7:1c:fc:48:94:85:39:4e:6e:13: bc:9c:fb:79:48:10:bc:77:7a:da:ce:e1:c8:45:45: 78:bc:e5:ba:40:86:47:a8:a3:e0:7d:81:f8:8c:4a: e4:d4:ef:96:53:c2:d8:36:cd:4a:84:c0:98:85:42: fd:42:d7:34:c3:86:33:22:d4:79:2e:5a:f2:0a:d3: 77:73:83:53:68:4b:54:54:0d:ee:02:fc:ec:d2:34: 69:22:3b:6b:0a:1f:02:c5:15:04:b1:5a:12:f4:8b: ee:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:E5:3C:24:80:06:B3:DA:43:03:7E:3A:A8:64:86:6D:35:96:80:4A X509v3 Authority Key Identifier: keyid:04:7B:8B:29:54:C4:7A:B1:5C:57:58:6D:D0:04:EB:89:39:77:C5:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BHuLKVTEerFcV1ht0ATriTl3xa8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ce:46:d8:e6:dd:c6:d4:2c:d3:a3:c2:45:fe:e2:77:92:a3:c6: d2:ab:38:36:62:22:83:ae:db:0d:bb:66:7c:d4:49:09:f3:7b: b5:5f:fa:5d:01:43:a4:2e:27:51:52:87:af:9c:a7:92:a5:d9: b7:f6:5d:8d:24:a7:42:c9:eb:b9:39:6f:69:2a:c6:90:8d:86: b4:ae:06:46:49:66:54:60:3d:19:8f:97:5a:51:61:35:e6:24: 1c:fe:48:49:ac:95:12:22:e8:f4:c6:81:5e:c8:4d:b3:d1:3f: 23:5c:5a:b4:79:ba:c1:f3:29:39:e7:36:7c:9a:92:dc:d1:6d: a7:26:1e:e0:fe:72:f3:cf:61:19:83:65:e5:b4:12:03:27:cf: ad:b0:e2:53:ca:95:d0:cd:49:17:57:55:28:5f:c6:e3:f6:dd: 3a:da:88:59:63:b5:f9:63:18:ae:39:1f:c4:7f:3c:15:0f:66: 70:4f:4e:51:5b:a1:d5:d6:54:46:e8:1a:ef:c1:15:70:0f:40: b4:51:87:12:39:d0:18:15:77:92:30:50:8d:35:7c:df:93:5c: 18:e8:49:b7:f3:08:f9:27:46:a2:d4:e1:24:c0:93:8d:57:62: 9b:2e:6c:d2:8e:55:46:ed:67:45:40:c9:8f:6f:7e:fe:f8:51: 5f:21:a5:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEmswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU4RUIxMTAvBgNVBAUTKDA0N0I4QjI5NTRDNDdBQjE1QzU3NTg2REQwMDRFQjg5 Mzk3N0M1QUYwHhcNMjUwNTE0MTcxMTQ2WhcNMjUwNTIxMTcxMTQ2WjAYMRYwFAYD VQQDEw02ODI0Y2VkMi03Y2M4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA17EyxaQkJvbJPR/czue8hAzKH6nFNwwMN03Wd2g1XN3oca7Mc7p5uKR6e2C/ 6TVlCBcIBd23vqJems7hZylvRlFWSw7BX1KptZRtS5QIlx4L0ELaSbIZk5eKcdkt UnGy63XXA80TrxPGE2PiVU7e//BKUFqJDX+V0mhKeEwLkNU7NW2uDsbarkSLo8QM GzGlb9yBmLOp5yLZFscc/EiUhTlObhO8nPt5SBC8d3razuHIRUV4vOW6QIZHqKPg fYH4jErk1O+WU8LYNs1KhMCYhUL9Qtc0w4YzItR5LlryCtN3c4NTaEtUVA3uAvzs 0jRpIjtrCh8CxRUEsVoS9IvuNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEPlPCSA BrPaQwN+Oqhkhm01loBKMB8GA1UdIwQYMBaAFAR7iylUxHqxXFdYbdAE64k5d8Wv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RThFQi9EMDM5RjhENkQx QkYxMUU4QjI2NEY2NUFDNEY5QUUwMi9CSHVMS1ZURWVyRmNWMWh0MEFUcmlUbDN4 YTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JIdUxLVlRFZXJGY1YxaHQwQVRyaVRsM3hhOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RThFQi9EMDM5RjhENkQxQkYxMUU4QjI2NEY2NUFDNEY5QUUwMi9CSHVMS1ZURWVy RmNWMWh0MEFUcmlUbDN4YTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDORtjm3cbULNOjwkX+4neSo8bSqzg2YiKDrtsNu2Z81EkJ83u1X/pd AUOkLidRUoevnKeSpdm39l2NJKdCyeu5OW9pKsaQjYa0rgZGSWZUYD0Zj5daUWE1 5iQc/khJrJUSIuj0xoFeyE2z0T8jXFq0ebrB8yk55zZ8mpLc0W2nJh7g/nLzz2EZ g2XltBIDJ8+tsOJTypXQzUkXV1UoX8bj9t062ohZY7X5YxiuOR/EfzwVD2ZwT05R W6HV1lRG6BrvwRVwD0C0UYcSOdAYFXeSMFCNNXzfk1wY6Em38wj5J0ai1OEkwJON V2KbLmzSjlVG7WdFQMmPb37++FFfIaWE -----END CERTIFICATE-----Generated at Fri May 16 07:33:44 2025 by rpki-client